Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again
NY A04947

NY A04947: Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around d… Verified

Full title shown below

Sign in to follow

Get emailed when this bill changes status, is amended, or advances.

Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation. Read full disclaimer →
View full title

Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

AI Summary

The NY Privacy Act mandates companies to disclose de-identification methods, safeguard data sharing, and allow consumers to know all entities with whom their data is shared.

Business Impact

If you operate in New York, you must disclose your de-identification methods and data-sharing entities by January 1, 2025, or face penalties.

State
New York
Bill Number
A04947
Status
Introduced
Risk Level
High
Category
Comprehensive
Last Action
Jan 7, 2026
Last Verified
May 4, 2026
Data Updated
May 4, 2026
What do these statuses mean?
Introduced — Filed in the legislature; not yet heard in committee
In Committee — Assigned to and being reviewed by a legislative committee
Passed — Approved by one or both chambers; awaiting further action
Signed / Enacted — Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed — Vetoed, failed to pass, or session expired without action
Unknown — Status data not yet available or awaiting classification

Affected Industries

Data Services Advertising Technology Consumer Protection

Topics How we classify →

What This Means

The New York Privacy Act enhances consumer control over data by requiring companies to disclose their data handling practices and implement safeguards around data sharing. This legislation is particularly focused on transparency and consumer rights.

Key Provisions

Latest Legislative Action

referred to consumer affairs and protection

Bill Sponsors (showing 5 of 27)

Name Role
Primary
Primary
Primary
Primary
Primary

Compliance Checklist

Disclose de-identification methods and data processing practices
Who: All businesses processing personal data of New York residents
Deadline: Upon enactment of the law
Penalty: Fines and enforcement actions by the Attorney General
Implement reasonable data security measures
Who: Businesses processing personal data
Deadline: Ongoing compliance required
Penalty: Potential penalties and private lawsuits

Related & Companion Bills

New York A08158 — Enacts the New York privacy act to require companies to dis… New York A00974 — Enacts the New York privacy act to require companies to dis… New York S08524 — Enacts the New York privacy act to require companies to dis… New York S03044 — Enacts the New York privacy act to require companies to dis…

Full Legal Analysis

The NY Privacy Act requires companies to disclose their methods of de-identifying personal information and to implement special safeguards around data sharing. The bill also allows consumers to obtain the names of all entities with whom their information is shared.

Official Source


More New York AI Legislation

View All NY Laws →

More New York AI Laws

Browse all published AI bills and regulations for New York.

View NY Laws →

Stay Updated on AI Laws

New AI laws, compliance deadlines, and plain-English breakdowns. Updated daily.

Unsubscribe anytime.
You're subscribed. Check your inbox.
Report an error in this data